AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions and listing of claims in the above- 
referenced application. 
Listing of Claims : 

1 . (Currently Amended) A method executed in a comput e r syst e m for restricting access 
to a device comprising: 

receiving a data operation in connection with the device; 

determining a type of said device as one of restricted access and standard access; 

determining if an opcode associated with said data operation is included in one of a first 
set of opcodes and a second set of opcodes, said first set of opcodes specifying standard data 
operations, and said second set of opcodes specifying restricted data operations; 

determining a target location associated with said data operation; and 

in response to determining one of said first and said second sets of opcodes, said type, 
and said target location, determining if said data operation is valid in accordance with said type 
and which of said sets of opcodes includes said opcode . 

2. (Currently Amended) Th e m e thod of Claim 1, furth e r comprising: 
A method for restricting access to a device comprising: 

receiving a data operation in connection with the device; 

determining a type of said device as one of restricted access and standard access; 

determining if an opcode associated with said data operation is included in one of a first 

set of opcodes and a second set of opcodes, said first set of opcodes specifying standard data 

operations, and said second set of opcodes specifying restricted data operations; 
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determining a target location associated with said data operation; 

in response to determining one of said first and said second sets of opcodes, said type, 
and said target location, determining if said data operation is valid; and 

determining that said data operation is valid if said opcode is included in said second set 
and said type is restricted. 

3. (Original) The method of Claim 2, further comprising: 

determining that said data operation is valid if said opcode is included in said first set and 
said type is standard. 

4. (Original) The method of Claim 3, further comprising: 

determining that said data operation is valid in response to determining that said opcode 
is included in said first set, said type is restricted and said location is one of standard access on 
said device. 

5. (Original) The method of Claim 4, further comprising: 

performing said data operation in response to determining that said data operation is valid 
and otherwise performing error processing. 

6. (Original) The method of Claim 5, wherein each of said first and second sets of 
opcodes includes a read opcode and a write opcode, each of the opcodes included in said first set 
being different from each of said opcodes included in said second set. 
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7. (Original) The method of Claim 1, further comprising: 

recognizing a device which is of type restricted access by all hosts included in the 
computer system. 

8. (Original) The method of Claim 7, further comprising: 

restricting access to a recognized device to a particular host in the computer system by 
having said particular host perform data operations to said recognized device using opcodes 
included in said second set. 

9. (Currently Amended) The method of Claim 8, wherein only a specific software 
program executing on in the particular host in the computer system is able to access said 
recognized device by performing data operations using opcodes included in said second set. 

10. (Original) The method of Claim 9, further comprising: 

changing a status associated with a recognized device between restricted and standard. 

11. (Original) The method of Claim 10, further comprising: 

using a configuration file and value included therein to specify said status. 

12. (Original) The method of Claim 9, further comprising: 

performing a data operation to said recognized device that includes a file that is 
accessible by a plurality of hosts, a first of said plurality of hosts having exclusive access to said 
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file by performing data operations in connection with said recognized device using opcodes 
included in said second set. 

13. (Original) The method of Claim 1, further comprising: 

installing an application programming interface on a host included in said computer 
system performing said data operation; and 

using said application programming interface to issue said data operation. 



14. (Original) The method of Claim 13, further comprising: 

configuring said application programming interface in accordance with a device 

configuration associated with said host wherein said device configuration includes said host 

accessing at least one device as a restricted access device. 
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15. (Currently Amended) A computer program product stored on a computer-readable 
medium for restricting access to a device comprising: 

machine executable code that receives a data operation in connection with the device; 
machine executable code that determines a type of said device as one of restricted access 
and standard access; 

machine executable code that determines if an opcode associated with said data operation 
is included in one of a first set of opcodes and a second set of opcodes, said first set of opcodes 
specifying standard data operations, and said second set of opcodes specifying restricted data 
operations; 

machine executable code that determines a target location associated with said data 
operation; and 

machine executable code that, in response to determining one of said first and said 
second sets of opcodes, said type, and said target location, determines if said data operation is 
valid in accordance with said type and which of said sets of opcodes includes said opcode . 

16. (Original) The computer program product of Claim 15, further comprising: 
machine executable code that determines that said data operation is valid if said opcode is 

included in said second set and said type is restricted. 

17. (Original) The computer program product of Claim 16, further comprising: 
machine executable code that determines that said data operation is valid if said opcode is 

included in said first set and said type is standard. 
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18. (Original) The computer program product of Claim 17, further comprising: 
machine executable code that determines that said data operation is valid in response to 

determining that said opcode is included in said first set, said type is restricted and said location 
is one of standard access on said device. 

19. (Original) The computer program product of Claim 18, further comprising: 
machine executable code that performs said data operation in response to determining 

that said data operation is valid and otherwise performing error processing. 

20. (Original) The computer program product of Claim 19, wherein each of said first 
and second sets of opcodes includes a read opcode and a write opcode, each of the opcodes 
included in said first set being different from each of said opcodes included in said second set. 

21. (Original) The computer program product of Claim 15, further comprising: 
machine executable code that recognizes a device which is of type restricted access by all 

hosts included in the computer system. 

22. (Original) The machine executable code of Claim 21, further comprising: 
machine executable code that restricts access to a recognized device to a particular host in 

the computer system by having said particular host perform data operations to said recognized 
device using opcodes included in said second set. 
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23. (Currently Amended) The computer program product of Claim 22, wherein only a 
specific software program executing on in the particular host in the computer system is able to 
access said recognized device by performing data operations using opcodes included in said 
second set. 

24. (Original) The computer program product of Claim 23, further comprising: 
machine executable code that changes a status associated with a recognized device 

between restricted and standard. 

25. (Original) The computer program product of Claim 24, further comprising: 
machine executable code that uses a configuration file and value included therein to 
specify said status. 

26. (Original) The computer program product of Claim 23, further comprising: 
machine executable code that performs a data operation to said recognized device that 

includes a file that is accessible by a plurality of hosts, a first of said plurality of hosts having 
exclusive access to said file by performing data operations in connection with said recognized 
device using opcodes included in said second set. 

27. (Original) The computer program product of Claim 15, further comprising: 
machine executable code that installs an application programming interface on a host 

included in said computer system performing said data operation; and 

machine executable code that uses said application programming interface to issue said 
data operation. 
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28. (Original) The computer program product of Claim 27, further comprising: 
machine executable code that configures said application programming interface in 
accordance with a device configuration associated with said host wherein said device 
configuration includes said host accessing at least one device as a restricted access device. 
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29. (Currently Amended) An apparatus for restricting access to a device in a computer 
system comprising: 

means for receiving a data operation in connection with the device; 

means for determining a type of said device as one of restricted access and standard 

access; 

means for determining if an opcode associated with said data operation is included in one 
of a first set of opcodes and a second set of opcodes, said first set of opcodes specifying standard 
data operations, and said second set of opcodes specifying restricted data operations; 

means for determining a target location associated with said data operation; and 
means for determining, in response to said means for determining one of said first and 
said second sets of opcodes, said type, and said target location, if said data operation is valid in 
accordance with said type and which of said sets of opcodes includes said opcode . 

30. (Currently Amended) The apparatus of Claim 29, furth e r comprising: 

An apparatus for restricting access to a device in a computer system comprising: 

means for receiving a data operation in connection with the device; 

means for determining a type of said device as one of restricted access and standard 

access; 

means for determining if an opcode associated with said data operation is included in one 
of a first set of opcodes and a second set of opcodes, said first set of opcodes specifying standard 
data operations, and said second set of opcodes specifying restricted data operations; 

means for determining a target location associated with said data operation; 
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means for determining, in response to said means for determining one of said first and 
said second sets of opcodes, said type, and said target location, if said data operation is valid; and 

means for determining that said data operation is valid if said opcode is included in said 
second set and said type is restricted. 

31. (Original) The apparatus of Claim 30, further comprising: 

means for determining that said data operation is valid if said opcode is included in said 
first set and said type is standard. 

32. (Original) The apparatus of Claim 31, further comprising: 

means for determining that said data operation is valid in response to determining that 
said opcode is included in said first set, said type is restricted and said location is one of standard 
access on said device. 

33. (Original) The apparatus of Claim 32, further comprising: 

means for performing said data operation in response to determining that said data 
operation is valid and otherwise performing error processing. 

34. (Original) The apparatus of Claim 33, wherein each of said first and second sets of 
opcodes includes a read opcode and a write opcode, each of the opcodes included in said first set 
being different from each of said opcodes included in said second set. 

35. (Original) The apparatus of Claim 29, further comprising: 
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means for recognizing a device which is of type restricted access by all hosts included in 
the computer system. 

36. (Original) The apparatus of Claim 35, further comprising: 

means for restricting access to a recognized device to a particular host in the computer 
system by having said particular host perform data operations to said recognized device using 
opcodes included in said second set. 

37. (Currently Amended) The apparatus of Claim 36, wherein only a specific software 
program executing on m the particular host in the computer system is able to access said 
recognized device by performing data operations using opcodes included in said second set. 

38. (Original) The apparatus of Claim 37, further comprising: 

means for changing a status associated with a recognized device between restricted and 
standard. 

39. (Original) The apparatus of Claim 38, further comprising: 

means for using a configuration file and value included therein to specify said status. 

40. (Original) The apparatus of Claim 37, further comprising: 

means for performing a data operation to said recognized device that includes a file that 
is accessible by a plurality of hosts, a first of said plurality of hosts having exclusive access to 
said file by performing data operations in connection with said recognized device using opcodes 
included in said second set. 
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41. (Original) The apparatus of Claim 29, further comprising: 

means for installing an application programming interface on a host included in said 
computer system performing said data operation; and 

means for using said application programming interface to issue said data operation. 

42. (Original) The apparatus of Claim 41, further comprising: 

means for configuring said application programming interface in accordance with a 
device configuration associated with said host wherein said device configuration includes said 
host accessing at least one device as a restricted access device. 
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